$ rpki-client -vvf rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft File: fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft (raw, json) Hash identifier: od6yO2MA0Db4SAWxJgqyKgwjDUSWCVTO5eJIEhtgGCk= Subject key identifier: 8F:36:D0:BA:1E:10:BC:6F:16:F7:82:D6:F9:2D:42:1E:3E:83:2B:DF Authority key identifier: 7E:E3:B8:8F:B1:AF:0D:92:DB:D2:16:61:25:FB:09:CB:24:F1:08:3F Certificate issuer: /CN=A9170AF9/serialNumber=7EE3B88FB1AF0D92DBD2166125FB09CB24F1083F Certificate serial: 053E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft Manifest number: 053B Signing time: Tue 07 May 2024 00:58:01 +0000 Manifest this update: Tue 07 May 2024 00:58:00 +0000 Manifest next update: Tue 14 May 2024 00:58:00 +0000 Files and hashes: 1: fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl (hash: ticGdhbPg4C31QMXIshNMtX8fAZ14pJQyNc2eB0lKVI=) 2: 98212A1EA7F011EB816C331FC4F9AE02.roa (hash: 42hTMuxdcLVmzY5RhEucd8f4AU5Ld3Mok/kDpWlyeK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 00:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1342 (0x53e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170AF9/serialNumber=7EE3B88FB1AF0D92DBD2166125FB09CB24F1083F Validity Not Before: May 7 00:58:00 2024 GMT Not After : May 14 00:58:00 2024 GMT Subject: CN=66397c99-c907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:77:f0:bc:1a:6b:66:f0:f2:d1:62:0a:b8:d9: 47:98:0f:92:2b:15:75:63:92:30:f0:94:66:71:bb: d2:51:2b:ca:9a:83:37:50:35:44:a3:f2:20:9e:cf: b0:a9:b4:e8:72:4c:18:f2:c5:23:dc:6b:fa:ed:cf: b5:c9:67:27:e2:eb:7f:95:89:0d:fd:af:67:22:3a: 1d:3f:af:e1:d0:fb:43:c6:f3:d5:e6:f1:0b:a5:e6: 6a:e2:02:47:8f:01:d7:5d:9e:c0:d0:97:94:d7:da: c7:f3:96:b4:f3:0a:fe:94:f2:c1:59:c8:f5:85:60: 91:b6:f9:58:4e:83:19:18:7c:8b:b6:25:e1:06:0e: e2:19:57:fb:7a:27:2f:c3:1f:56:38:f4:d1:e1:45: 67:84:3d:11:ee:3d:1a:8d:03:95:be:14:c2:e3:ab: d8:f4:51:20:7c:ea:fe:4f:37:f0:ca:fd:dc:2f:e9: 99:1f:02:b9:0e:5a:30:df:9a:08:cf:7c:ce:cd:bc: c2:03:c3:c7:8e:60:b2:34:ca:60:0a:a9:a7:1d:7c: 71:eb:bb:7b:6d:c0:d9:b3:38:e1:39:10:23:b6:35: a1:84:7a:db:b3:c1:09:90:97:9e:66:95:cd:56:87: a5:79:74:19:46:35:89:75:79:1b:81:58:49:e0:6b: 36:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:36:D0:BA:1E:10:BC:6F:16:F7:82:D6:F9:2D:42:1E:3E:83:2B:DF X509v3 Authority Key Identifier: keyid:7E:E3:B8:8F:B1:AF:0D:92:DB:D2:16:61:25:FB:09:CB:24:F1:08:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d9:e6:c3:7f:ba:b3:54:a6:b8:c3:b6:ac:c8:a3:c7:31:b6: 0e:0c:d1:86:ab:20:81:e7:90:71:b9:ef:92:be:33:31:d1:43: 41:88:55:40:de:21:d7:d4:c3:f9:ab:b2:a1:05:29:58:8d:b9: cd:28:93:32:f9:2b:f4:a8:f7:20:2e:92:fe:14:df:1a:f7:4f: 41:e8:08:f0:5e:21:43:d4:44:2d:2f:16:ab:26:79:b0:ec:b9: c4:7e:8d:61:6e:f4:18:fd:23:9a:73:e1:c4:d4:5d:27:c4:d4: de:1b:28:c6:01:4d:37:c8:6d:ff:cf:93:05:cc:aa:ef:bc:dd: 9a:d2:52:60:09:f0:9a:f1:dd:7e:1c:8a:1f:55:a8:87:c2:2d: ee:dd:88:a0:3f:8b:53:2c:2e:d9:16:10:3a:9a:c7:47:3f:47: 97:93:7b:6a:f6:a1:bb:75:ad:db:6a:d7:ba:87:dc:0c:77:77: ae:91:03:38:40:2d:81:02:c4:82:37:15:d0:01:f4:6e:3c:fe: 9a:e2:a4:65:43:56:4a:65:a7:4b:3a:a9:69:18:f4:43:51:25: 5f:1b:59:bb:b9:05:c4:ef:8a:4b:01:17:33:d4:3a:cf:59:af: ad:3f:8b:58:9a:dc:92:0d:67:8a:7a:7a:eb:ac:00:10:a5:e3: da:91:36:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBBRjkxMTAvBgNVBAUTKDdFRTNCODhGQjFBRjBEOTJEQkQyMTY2MTI1RkIwOUNC MjRGMTA4M0YwHhcNMjQwNTA3MDA1ODAwWhcNMjQwNTE0MDA1ODAwWjAYMRYwFAYD VQQDEw02NjM5N2M5OS1jOTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3fwvBprZvDy0WIKuNlHmA+SKxV1Y5Iw8JRmcbvSUSvKmoM3UDVEo/Igns+w qbTockwY8sUj3Gv67c+1yWcn4ut/lYkN/a9nIjodP6/h0PtDxvPV5vELpeZq4gJH jwHXXZ7A0JeU19rH85a08wr+lPLBWcj1hWCRtvlYToMZGHyLtiXhBg7iGVf7eicv wx9WOPTR4UVnhD0R7j0ajQOVvhTC46vY9FEgfOr+Tzfwyv3cL+mZHwK5Dlow35oI z3zOzbzCA8PHjmCyNMpgCqmnHXxx67t7bcDZszjhORAjtjWhhHrbs8EJkJeeZpXN VoeleXQZRjWJdXkbgVhJ4Gs2FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI820Loe ELxvFveC1vktQh4+gyvfMB8GA1UdIwQYMBaAFH7juI+xrw2S29IWYSX7Ccsk8Qg/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEFGOS8yOUNEQ0Q4RUE3 RUYxMUVCQjEyREE0MUVDNEY5QUUwMi9mdU80ajdHdkRaTGIwaFpoSmZzSnl5VHhD RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1TzRqN0d2RFpMYjBoWmhKZnNKeXlUeENEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEFGOS8yOUNEQ0Q4RUE3RUYxMUVCQjEyREE0MUVDNEY5QUUwMi9mdU80ajdHdkRa TGIwaFpoSmZzSnl5VHhDRDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/2ebDf7qzVKa4w7asyKPHMbYODNGGqyCB55Bxue+SvjMx0UNBiFVA 3iHX1MP5q7KhBSlYjbnNKJMy+Sv0qPcgLpL+FN8a909B6AjwXiFD1EQtLxarJnmw 7LnEfo1hbvQY/SOac+HE1F0nxNTeGyjGAU03yG3/z5MFzKrvvN2a0lJgCfCa8d1+ HIofVaiHwi3u3YigP4tTLC7ZFhA6msdHP0eXk3tq9qG7da3bate6h9wMd3eukQM4 QC2BAsSCNxXQAfRuPP6a4qRlQ1ZKZadLOqlpGPRDUSVfG1m7uQXE74pLARcz1DrP Wa+tP4tYmtySDWeKenrrrAAQpePakTbK -----END CERTIFICATE-----Generated at Tue May 7 01:58:20 2024 by rpki-client on console-fra.rpki-client.org